#pentest

RedAmon (samugit83/redamon, MIT) is a self-hosted Docker penetration-testing framework that maps an authorized target into a Neo4j graph, runs an agent from a Kali sandbox behind approval gates, and can open a GitHub pull request for a fix.

security-audit (cloudflare/security-audit-skill, MIT) is an agent skill that runs a six-phase defensive security audit - reconnaissance with a coverage ledger, isolated hunters, adversarial candidate validation, schema-validated findings.json, independent record verification, and target-neutral reports - seeded from Cloudflare's fleet-wide vulnerability discovery harness. 48.2k stars, 3k forks, 98 open issues at check time.